Skip to main content

Data Policy

Dear user,

The Sintetic GeoDB represents the central database of the Sintetic Project, whose goal is to demonstrate a traceability system for trees, logs and boards based on ICT. This database and its related API are hosted by the Institute of Informatics and Telematics of the Italian National Research Council (IIT–CNR).

We wish to inform you, as a data subject, that we follow a data policy in compliance with the EU Reg. 2016/679 “General Data Protection Regulation” (GDPR) and the Italian legislative decree n. 196/2003 on data protection, which is described in the following paragraphs.

Parties involved​

Data controller: Italian National Research Council (CNR), Piazzale Aldo Moro, 7 – 00185, Rome, Italy

Data processing officer: Director of the Institute of Informatics and Telematics of the CNR (IIT–CNR), direttore@iit.cnr.it

Data protection officer: rdp@cnr.it

IIT-CNR Project manager: marina.buzzi@iit.cnr.it

Scope and methods of data processing​

The necessary personal data (full name, email, organization, IP address) for the use of the platform will be processed according to the relevant and current data privacy legal frameworks, and in compliance with the Italian Data Protection Authority.

In this regard, the platform utilizes the security measures mandated by the relevant data privacy legal framework. In particular, all of the collected data will be processed by the project’s data officers and scientific managers and/or other authorized parties involved in the project —by electronic, automated and/or manual means— and exclusively within the aforementioned scope and related activities.

The Sintetic GeoDB is hosted on servers managed by the IIT-CNR. The data within the application will be digitally processed following the principles of art. 5 of the GDPR, in particular:

  • The user data within the platform is only available after authentication with password
  • All of the data communication between the platform server and client is encrypted and transmitted using HTTPS
  • Hosting servers and related software receive regular updates with priority given to security patches
  • Hosting servers are protected by a firewall
  • Use of VPN tunneling to remotely access the hosting servers
  • Backup systems
  • The platform uses digest access authentication and user passwords are stored encrypted

The processing of personal data is done for technology development and research purposes on forest value chain traceability systems in the context of the aforementioned Sintetic Project. Such processing is carried out by the data officers within the scope of their own duties of public interest pursuant to art. 6, section 1e) of the GDPR.

Data retention​

The data collected during the project’s lifecycle will be recorded, processed, and retained until the goals of the project are fulfilled and always in compliance with the deontological rules for the processing of data for research and statistical purposes, pursuant to art. 20, section 4, of the legislative decree of August 10, 2018, and n. 101 of December 19, 2018 (published on the Italian Official Gazette n. 11 on January 14, 2019).

Nature of data provision​

The provision of data of the project’s participants, for the aforementioned scope, is necessary to access the Sintetic GeoDB platform. Otherwise, the user will not be able to access the platform’s data and functionality.

External data processors​

Personal data will not be transferred to other parties.

Publication of research results​

All data to be published —via research publications and events, as well as data sets (including those that are open source)— will be done so in anonymized and/or aggregated form.

Rights concerning the protection of personal data​

As a data subject, you are entitled to all the rights present in art. 15 (and related) of the GDPR, in particular: access to personal data, as well as rectification, deletion and processing limitations of personal data. In addition, you have the right, at any time, to revoke your consent regarding your personal data, within the limitations of the processing done prior to such revocation. Note that pursuant to art. 17, section 3d) of the GDPR, the right to deletion is not applicable to data necessary for scientific research in the case this deletion could significantly compromise the project’s research goals.

To exercise these rights, you can contact the projects data protection officer, i.e., the Director of the IIT-CNR, as previously indicated. In any case, the right to file a complaint to the Italian Data Protection Authority remains valid.

Contacts​

To request information regarding the Sintetic GeoDB, please use the following contacts: